Privacy Policy - Tree Surgeons Sydenham

This Privacy Policy explains how Tree Surgeons Sydenham collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Sydenham customers in the area, including individuals who request quotations, book services, receive tree surgery work, or otherwise interact with our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Sydenham provides tree surgery and related services to residential and commercial customers in the local area. In the course of delivering our services, we may need to collect and use personal data to manage enquiries, carry out assessments, schedule work, issue invoices, and meet our legal obligations. We take our responsibilities seriously and aim to keep all information secure, relevant, and limited to what is necessary.

2. Personal Data We Collect

We may collect the following categories of personal data:

Identity information such as your name and, where relevant, the name of your business or property owner representative.
Contact details such as telephone number, email address, and service address.
Service information including details of the work requested, site access information, property notes, and instructions.
Payment and billing information such as invoice records, payment status, and transaction history.
Communication records including emails, messages, and notes from telephone conversations.
Technical information where relevant, such as basic website usage data or device information if you submit an online enquiry.
Safety and site-related information that may be required to carry out work safely, such as hazards, access restrictions, or relevant property conditions.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are required to retain it for a legal reason. If such information is received inadvertently, we will handle it with appropriate care and confidentiality.

3. How We Collect Data

We collect personal data directly from you when you:

make an enquiry or request a quotation;
book or use our services;
communicate with us by phone, email, text, or other channels;
provide property or access details needed to complete the work;
make a payment or request an invoice.

We may also receive data from third parties where necessary for service delivery, such as property managers, landlords, contractors, or representatives acting on your behalf. In limited circumstances, we may collect information from publicly available sources when it is necessary to verify site or property details.

4. Lawful Basis for Processing

We only process personal data where we have a lawful basis under data protection law. The lawful bases we rely on may include:

Contract – processing is necessary to provide quotations, carry out tree surgery services, manage bookings, and fulfil our obligations to you.
Legal obligation – processing is necessary to comply with laws, including tax, accounting, insurance, health and safety, and record-keeping requirements.
Legitimate interests – processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, preventing fraud, and maintaining service records, provided your rights do not override those interests.
Consent – in specific situations where consent is required, for example for certain marketing activities, we will ask for your clear permission and you may withdraw it at any time.

Where we rely on legitimate interests, we consider whether processing is necessary and proportionate. We also assess any potential impact on your privacy and take steps to minimise any risk.

5. How We Use Your Data

We may use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange visits, assessments, and scheduled work;
to deliver tree surgery services safely and efficiently;
to manage payments, invoicing, and accounting;
to keep service records and maintain business administration;
to comply with legal and regulatory obligations;
to resolve disputes, handle complaints, and defend legal claims;
to improve our operations, service quality, and customer experience;
to send service-related communications;
where permitted, to send relevant updates or marketing messages.

We will not use your information for purposes that are incompatible with the original reason it was collected unless we have a valid legal basis to do so.

6. Data Sharing and Processors

We may share personal data with trusted third-party service providers, known as processors, who act on our instructions and are required to protect your information. These may include:

accounting and bookkeeping providers;
payment processing services;
IT, cloud storage, and data backup providers;
email, messaging, and communication service providers;
software platforms used for administration or customer management;
professional advisers such as insurers, legal advisers, or auditors;
subcontractors or specialist contractors involved in delivering the requested work, where necessary.

We may also disclose personal data to public authorities, regulators, courts, or law enforcement bodies where required by law. Any third party receiving personal data from us must process it only for the purpose agreed and must apply appropriate security measures.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Retention periods may vary depending on the type of information and the reason it is held.

Enquiry records may be retained for a reasonable period to manage follow-up and customer service.
Job and service records may be retained for the duration of the business relationship and for a period afterwards to support warranty, dispute resolution, and service history needs.
Financial and tax records are typically kept for the period required by law.
Health and safety or compliance records may be retained for longer where legal obligations or risk management require it.

When information is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure data is not kept for longer than necessary.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, password protection, and limited data access based on need. While no system can be guaranteed completely secure, we work to keep your data safe and to respond promptly if an issue arises.

9. Your Rights

Under data protection law, you have rights regarding your personal data. Depending on the circumstances, these may include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain situations.
Right to restrict processing – you can ask us to limit how your data is used in some cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights may not apply in all situations, and there may be legal reasons why we cannot fully comply with a request. However, we will always explain our decision clearly.

10. Marketing Preferences

Where we send marketing communications and the law requires consent, we will only do so if you have opted in. You can withdraw consent or object to direct marketing at any time. This will not affect the lawfulness of processing carried out before your choice changed.

11. International Transfers

If any processor or service provider stores or accesses data outside the United Kingdom, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, approved contractual clauses, or equivalent protective measures designed to keep your information secure and compliant.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or the way we process data. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so you remain informed about how we handle your information.

13. Summary of Our Commitment

Tree Surgeons Sydenham is committed to respecting privacy and using personal data responsibly. We collect only what we need, use it for lawful and legitimate purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. Our approach is designed to protect the rights and freedoms of every customer while supporting the safe and efficient delivery of our services.

Last updated: This policy is maintained as part of our ongoing commitment to GDPR compliance and transparent data handling.